letsencrypt now generates certificates that include the chain

[ansible.git] / roles / unbound / tasks / main.yml

diff --git a/roles/unbound/tasks/main.yml b/roles/unbound/tasks/main.yml
index c53cecb2312a71025e1a2f8096ab93fed7f3cb91..d8d03e3dd0f84f98a1d6ebf17f2ca9fa93dc2406 100644 (file)
--- a/roles/unbound/tasks/main.yml
+++ b/roles/unbound/tasks/main.yml
@@ -34,3 +34,9 @@
   copy:
     dest: /etc/resolv.conf
     content: "nameserver 127.0.0.2\n"
   copy:
     dest: /etc/resolv.conf
     content: "nameserver 127.0.0.2\n"

+# some providers need extra hacks to make our DNS persistent
+- name: install DNS-fix cronjob
+  template:
+    dest: /etc/cron.hourly/fix-dns
+    src: templates/fix-dns
+    mode: +x